Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35322e302f32322d3234203d3e20323638323231.roa
File:                     34352e3233362e35322e302f32322d3234203d3e20323638323231.roa (raw, json)
Hash identifier:          LXzAQRQkoF00WjETpsBxmLx8Um2Thzo4yRCWg3yquYE=
Subject key identifier:   43:52:E3:2A:F0:03:32:26:54:20:49:A4:CE:10:1A:E6:11:88:4F:6A
Certificate issuer:       /CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
Certificate serial:       1DAAB329F4ECCC9D60ECBF0C85AF2AF828C73DE8
Authority key identifier: 42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35322e302f32322d3234203d3e20323638323231.roa
Signing time:             Tue 17 Jun 2025 12:15:32 +0000
ROA not before:           Tue 17 Jun 2025 12:10:32 +0000
ROA not after:            Tue 16 Jun 2026 12:15:32 +0000
asID:                     268221
IP address blocks:        45.236.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl
                          rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 16:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:aa:b3:29:f4:ec:cc:9d:60:ec:bf:0c:85:af:2a:f8:28:c7:3d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
        Validity
            Not Before: Jun 17 12:10:32 2025 GMT
            Not After : Jun 16 12:15:32 2026 GMT
        Subject: CN=4352E32AF0033226542049A4CE101AE611884F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:04:7e:9e:ae:ed:03:39:05:4c:4b:42:be:96:
                    3a:eb:8e:4d:62:3b:db:c3:cf:45:01:cc:61:87:be:
                    2d:b7:55:f3:6c:00:2e:64:ef:50:98:2f:93:c8:4d:
                    45:6d:ae:cc:25:16:ce:4c:27:f7:0c:b8:cc:dc:01:
                    10:8a:63:1a:09:ea:4a:6b:07:cf:34:97:36:7b:5f:
                    36:e9:3f:6b:0f:41:c0:17:e9:bf:08:02:81:2b:3d:
                    a5:40:f8:13:07:6a:36:df:f0:f3:7e:40:61:a7:47:
                    73:83:73:61:e8:cd:e8:cd:cb:05:9a:0b:5e:d9:90:
                    a4:e2:86:3a:4c:c5:23:f5:a6:cb:d2:02:89:c5:cb:
                    e8:47:ba:bf:25:47:c4:e3:34:97:00:9b:89:8d:49:
                    d4:b7:b3:e9:d2:63:ad:13:83:fc:d8:4b:b0:4e:ff:
                    d5:18:1c:d2:44:19:c6:08:46:21:d1:ac:9f:9c:43:
                    08:79:80:5f:3d:29:39:5b:9e:36:ea:75:a5:29:f7:
                    e3:85:33:60:da:94:c9:62:67:6c:81:7f:4e:de:6b:
                    1b:9f:e4:5a:8a:62:12:12:a7:55:6d:00:c8:9a:be:
                    10:47:9a:b0:ff:19:e2:63:ae:1c:2b:9d:6f:ad:85:
                    28:de:bd:62:0e:e5:d9:7e:8e:58:04:ab:4d:13:b5:
                    1e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:52:E3:2A:F0:03:32:26:54:20:49:A4:CE:10:1A:E6:11:88:4F:6A
            X509v3 Authority Key Identifier:
                keyid:42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35322e302f32322d3234203d3e20323638323231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:f3:d2:dd:23:9f:e8:8b:77:c3:3e:e0:b9:d6:d4:df:63:51:
         df:1e:b2:5f:13:33:52:9f:0c:4b:62:9a:85:2e:16:65:a9:f3:
         cb:3a:a2:45:35:44:c9:4a:e1:61:5a:c6:15:62:b9:13:12:19:
         a0:69:19:ab:e2:38:6d:8d:ab:1c:94:49:6a:ba:f3:7b:9b:06:
         d5:76:89:e4:05:14:e9:09:f4:12:73:39:0e:f5:38:92:a7:ce:
         9a:27:c9:7f:00:b7:50:0f:51:8e:91:70:e4:4c:79:2f:50:fa:
         63:33:0e:86:76:6f:73:aa:cb:14:3f:f4:1f:ad:39:18:3a:4c:
         c3:4c:ea:b9:59:5c:1c:58:09:c2:a3:5b:5d:99:76:2f:78:52:
         9b:a4:af:b0:f7:6b:2d:eb:e2:89:ab:13:d9:14:df:8f:5e:49:
         b8:bc:db:62:11:4b:2c:6e:76:2e:00:a2:c6:f2:bd:cd:05:58:
         71:d4:2e:cf:03:e0:5a:ed:25:e5:3f:33:68:eb:2d:27:34:10:
         ad:27:8c:5a:d8:15:84:38:5e:2c:2a:2e:4a:3b:fe:db:26:71:
         c5:19:28:59:1b:5d:b8:51:2e:7d:0a:49:b9:15:dc:1b:c2:71:
         5b:ac:c2:f9:43:64:f4:d3:42:eb:01:03:30:79:f1:81:47:f7:
         f3:c7:4c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 20:13:29 2025 by rpki-client